NOTE: This is a new vulnerability that is fixed by the same patch as the one posted on 10/3/2002 (Q316333), just below this article. If you've already installed that patch you are not affected by this new vulnerability.